@zxyycom/vibe-check 0.0.2 → 0.0.3

package/dist/esm/package-checks/host-environment/process/result.mjs

@@ -1,33 +1,59 @@
 export function toProcessResult(result, label) {
+    const cause = processCause(result);
+    const error = processErrorFor(result, label, cause);
     return {
-        error: processErrorFor(result, label),
+        ...(error === undefined ? {} : { error }),
+        ...(cause === "cancellation" ? { isCanceled: true } : {}),
+        ...(cause === "max-buffer" ? { isMaxBuffer: true } : {}),
         signal: result.signal ?? null,
         status: result.exitCode ?? null,
         stderr: outputString(result.stderr),
+        ...(cause === "timeout" ? { timedOut: true } : {}),
         stdout: outputString(result.stdout)
     };
 }
 function outputString(output) {
     return typeof output === "string" ? output : "";
 }
-function processErrorFor(result, label = "process") {
-    if (!isExecutionError(result)) {
+function processCause(result) {
+    if (typeof result.exitCode === "number" && result.exitCode !== 0)
+        return "exit";
+    if (result.isCanceled === true)
+        return "cancellation";
+    if (result.timedOut === true)
+        return "timeout";
+    if (result.isMaxBuffer === true)
+        return "max-buffer";
+    if (result.signal !== undefined)
+        return "signal";
+    if (result.exitCode === 0)
+        return "exit";
+    return "startup-failure";
+}
+function processErrorFor(result, label, cause) {
+    if (!requiresProcessError(cause, result))
         return undefined;
-    }
-    const message = result.originalMessage ?? result.shortMessage ?? result.message ?? `${label} failed`;
-    const error = new Error(message);
-    if (result.code) {
-        error.code = result.code;
-    }
+    const error = new Error(processErrorMessage(result, label));
+    const code = processErrorCode(result);
+    if (code !== undefined)
+        error.code = code;
     return error;
 }
-function isExecutionError(result) {
-    if (!result.failed) {
-        return false;
-    }
-    if (typeof result.exitCode === "number") {
-        return false;
-    }
-    return Boolean(result.code || result.timedOut || result.isMaxBuffer || result.signal);
+function requiresProcessError(cause, result) {
+    return cause !== "exit" && result.failed === true;
+}
+function processErrorMessage(result, label) {
+    if (result.originalMessage !== undefined)
+        return result.originalMessage;
+    if (result.shortMessage !== undefined)
+        return result.shortMessage;
+    if (result.message !== undefined)
+        return result.message;
+    return `${label} failed`;
+}
+function processErrorCode(result) {
+    if (result.code === undefined || result.code.length === 0)
+        return undefined;
+    return result.code;
 }
 //# sourceMappingURL=result.mjs.map

package/dist/esm/package-checks/host-environment/process/result.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"result.mjs","sourceRoot":"","sources":["../../../../../src/package-checks/host-environment/process/result.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,KAAa;IACpE,OAAO;QACL,KAAK,EAAE,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB,EAAE,KAAK,GAAG,SAAS;IACjE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GACX,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,KAAK,SAAS,CAAC;IACvF,MAAM,KAAK,GAA0B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC","sourcesContent":["import type { ExecaResultLike, ProcessResult } from \"./contract.ts\";\n\nexport function toProcessResult(result: ExecaResultLike, label: string): ProcessResult {\n  return {\n    error: processErrorFor(result, label),\n    signal: result.signal ?? null,\n    status: result.exitCode ?? null,\n    stderr: outputString(result.stderr),\n    stdout: outputString(result.stdout)\n  };\n}\n\nfunction outputString(output: unknown): string {\n  return typeof output === \"string\" ? output : \"\";\n}\n\nfunction processErrorFor(result: ExecaResultLike, label = \"process\"): Error | undefined {\n  if (!isExecutionError(result)) {\n    return undefined;\n  }\n\n  const message =\n    result.originalMessage ?? result.shortMessage ?? result.message ?? `${label} failed`;\n  const error: NodeJS.ErrnoException = new Error(message);\n  if (result.code) {\n    error.code = result.code;\n  }\n  return error;\n}\n\nfunction isExecutionError(result: ExecaResultLike): boolean {\n  if (!result.failed) {\n    return false;\n  }\n  if (typeof result.exitCode === \"number\") {\n    return false;\n  }\n  return Boolean(result.code || result.timedOut || result.isMaxBuffer || result.signal);\n}\n"]}
+{"version":3,"file":"result.mjs","sourceRoot":"","sources":["../../../../../src/package-checks/host-environment/process/result.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,KAAa;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAUD,SAAS,YAAY,CAAC,MAAuB;IAC3C,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAChF,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CACtB,MAAuB,EACvB,KAAa,EACb,KAAmB;IAEnB,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3D,MAAM,KAAK,GAA0B,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB,EAAE,MAAuB;IACxE,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAuB,EAAE,KAAa;IACjE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC;IACxE,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACxD,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC","sourcesContent":["import type { ExecaResultLike, ProcessResult } from \"./contract.ts\";\n\nexport function toProcessResult(result: ExecaResultLike, label: string): ProcessResult {\n  const cause = processCause(result);\n  const error = processErrorFor(result, label, cause);\n  return {\n    ...(error === undefined ? {} : { error }),\n    ...(cause === \"cancellation\" ? { isCanceled: true as const } : {}),\n    ...(cause === \"max-buffer\" ? { isMaxBuffer: true as const } : {}),\n    signal: result.signal ?? null,\n    status: result.exitCode ?? null,\n    stderr: outputString(result.stderr),\n    ...(cause === \"timeout\" ? { timedOut: true as const } : {}),\n    stdout: outputString(result.stdout)\n  };\n}\n\nfunction outputString(output: unknown): string {\n  return typeof output === \"string\" ? output : \"\";\n}\n\ntype ProcessCause =\n  | \"cancellation\"\n  | \"exit\"\n  | \"max-buffer\"\n  | \"signal\"\n  | \"startup-failure\"\n  | \"timeout\";\n\nfunction processCause(result: ExecaResultLike): ProcessCause {\n  if (typeof result.exitCode === \"number\" && result.exitCode !== 0) return \"exit\";\n  if (result.isCanceled === true) return \"cancellation\";\n  if (result.timedOut === true) return \"timeout\";\n  if (result.isMaxBuffer === true) return \"max-buffer\";\n  if (result.signal !== undefined) return \"signal\";\n  if (result.exitCode === 0) return \"exit\";\n  return \"startup-failure\";\n}\n\nfunction processErrorFor(\n  result: ExecaResultLike,\n  label: string,\n  cause: ProcessCause\n): Error | undefined {\n  if (!requiresProcessError(cause, result)) return undefined;\n\n  const error: NodeJS.ErrnoException = new Error(processErrorMessage(result, label));\n  const code = processErrorCode(result);\n  if (code !== undefined) error.code = code;\n  return error;\n}\n\nfunction requiresProcessError(cause: ProcessCause, result: ExecaResultLike): boolean {\n  return cause !== \"exit\" && result.failed === true;\n}\n\nfunction processErrorMessage(result: ExecaResultLike, label: string): string {\n  if (result.originalMessage !== undefined) return result.originalMessage;\n  if (result.shortMessage !== undefined) return result.shortMessage;\n  if (result.message !== undefined) return result.message;\n  return `${label} failed`;\n}\n\nfunction processErrorCode(result: ExecaResultLike): string | undefined {\n  if (result.code === undefined || result.code.length === 0) return undefined;\n  return result.code;\n}\n"]}

package/dist/esm/package-checks/host-environment/process/runner.mjs

@@ -7,7 +7,7 @@ export function runProcessSync(options) {
     const result = execaSync(command, args, {
         ...processOptions,
         encoding: processOptions.encoding ?? "utf8",
-        env: plainTextProcessEnv({ env: processOptions.env }),
+        env: plainTextProcessEnv(processOptions.env === undefined ? {} : { env: processOptions.env }),
         maxBuffer: processOptions.maxBuffer ?? DEFAULT_PROCESS_MAX_BUFFER_BYTES,
         reject: false,
         stripFinalNewline: false,
@@ -16,14 +16,16 @@ export function runProcessSync(options) {
     return toProcessResult(result, command);
 }
 export function runProcess(options) {
-    const { args = [], command, cwd, env, label = command, maxBuffer = DEFAULT_PROCESS_MAX_BUFFER_BYTES, timeout, windowsHide = true } = options;
+    const { args = [], cancelSignal, command, cwd, env, extendEnv, label = command, maxBuffer = DEFAULT_PROCESS_MAX_BUFFER_BYTES, timeout, windowsHide = true } = options;
     return execa(command, args, {
-        cwd,
-        env: plainTextProcessEnv({ env }),
+        ...(cancelSignal === undefined ? {} : { cancelSignal }),
+        ...(cwd === undefined ? {} : { cwd }),
+        ...(extendEnv === undefined ? {} : { extendEnv }),
+        env: plainTextProcessEnv(env === undefined ? {} : { env }),
         maxBuffer,
         reject: false,
         stripFinalNewline: false,
-        timeout,
+        ...(timeout === undefined ? {} : { timeout }),
         windowsHide
     }).then((result) => toProcessResult(result, label));
 }

package/dist/esm/package-checks/host-environment/process/runner.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runner.mjs","sourceRoot":"","sources":["../../../../../src/package-checks/host-environment/process/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,gCAAgC,EAIjC,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,GAAG,cAAc;QACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,IAAI,MAAM;QAC3C,GAAG,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;QACrD,SAAS,EAAE,cAAc,CAAC,SAAS,IAAI,gCAAgC;QACvE,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,IAAI;KAChD,CAAC,CAAC;IACH,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,MAAM,EACJ,IAAI,GAAG,EAAE,EACT,OAAO,EACP,GAAG,EACH,GAAG,EACH,KAAK,GAAG,OAAO,EACf,SAAS,GAAG,gCAAgC,EAC5C,OAAO,EACP,WAAW,GAAG,IAAI,EACnB,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QAC1B,GAAG;QACH,GAAG,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC;QACjC,SAAS;QACT,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;QACxB,OAAO;QACP,WAAW;KACZ,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC","sourcesContent":["import { execa, execaSync } from \"execa\";\n\nimport { plainTextProcessEnv } from \"./env.ts\";\nimport { toProcessResult } from \"./result.ts\";\nimport {\n  DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n  type ProcessResult,\n  type RunProcessOptions,\n  type RunProcessSyncOptions\n} from \"./contract.ts\";\n\nexport function runProcessSync(options: RunProcessSyncOptions): ProcessResult {\n  const { args, command, ...processOptions } = options;\n  const result = execaSync(command, args, {\n    ...processOptions,\n    encoding: processOptions.encoding ?? \"utf8\",\n    env: plainTextProcessEnv({ env: processOptions.env }),\n    maxBuffer: processOptions.maxBuffer ?? DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n    reject: false,\n    stripFinalNewline: false,\n    windowsHide: processOptions.windowsHide ?? true\n  });\n  return toProcessResult(result, command);\n}\n\nexport function runProcess(options: RunProcessOptions): Promise<ProcessResult> {\n  const {\n    args = [],\n    command,\n    cwd,\n    env,\n    label = command,\n    maxBuffer = DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n    timeout,\n    windowsHide = true\n  } = options;\n\n  return execa(command, args, {\n    cwd,\n    env: plainTextProcessEnv({ env }),\n    maxBuffer,\n    reject: false,\n    stripFinalNewline: false,\n    timeout,\n    windowsHide\n  }).then((result) => toProcessResult(result, label));\n}\n"]}
+{"version":3,"file":"runner.mjs","sourceRoot":"","sources":["../../../../../src/package-checks/host-environment/process/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,gCAAgC,EAIjC,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,GAAG,cAAc;QACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,IAAI,MAAM;QAC3C,GAAG,EAAE,mBAAmB,CAAC,cAAc,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;QAC7F,SAAS,EAAE,cAAc,CAAC,SAAS,IAAI,gCAAgC;QACvE,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,IAAI;KAChD,CAAC,CAAC;IACH,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,MAAM,EACJ,IAAI,GAAG,EAAE,EACT,YAAY,EACZ,OAAO,EACP,GAAG,EACH,GAAG,EACH,SAAS,EACT,KAAK,GAAG,OAAO,EACf,SAAS,GAAG,gCAAgC,EAC5C,OAAO,EACP,WAAW,GAAG,IAAI,EACnB,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QAC1B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,EAAE,mBAAmB,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QAC1D,SAAS;QACT,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,KAAK;QACxB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,WAAW;KACZ,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC","sourcesContent":["import { execa, execaSync } from \"execa\";\n\nimport { plainTextProcessEnv } from \"./env.ts\";\nimport { toProcessResult } from \"./result.ts\";\nimport {\n  DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n  type ProcessResult,\n  type RunProcessOptions,\n  type RunProcessSyncOptions\n} from \"./contract.ts\";\n\nexport function runProcessSync(options: RunProcessSyncOptions): ProcessResult {\n  const { args, command, ...processOptions } = options;\n  const result = execaSync(command, args, {\n    ...processOptions,\n    encoding: processOptions.encoding ?? \"utf8\",\n    env: plainTextProcessEnv(processOptions.env === undefined ? {} : { env: processOptions.env }),\n    maxBuffer: processOptions.maxBuffer ?? DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n    reject: false,\n    stripFinalNewline: false,\n    windowsHide: processOptions.windowsHide ?? true\n  });\n  return toProcessResult(result, command);\n}\n\nexport function runProcess(options: RunProcessOptions): Promise<ProcessResult> {\n  const {\n    args = [],\n    cancelSignal,\n    command,\n    cwd,\n    env,\n    extendEnv,\n    label = command,\n    maxBuffer = DEFAULT_PROCESS_MAX_BUFFER_BYTES,\n    timeout,\n    windowsHide = true\n  } = options;\n\n  return execa(command, args, {\n    ...(cancelSignal === undefined ? {} : { cancelSignal }),\n    ...(cwd === undefined ? {} : { cwd }),\n    ...(extendEnv === undefined ? {} : { extendEnv }),\n    env: plainTextProcessEnv(env === undefined ? {} : { env }),\n    maxBuffer,\n    reject: false,\n    stripFinalNewline: false,\n    ...(timeout === undefined ? {} : { timeout }),\n    windowsHide\n  }).then((result) => toProcessResult(result, label));\n}\n"]}

package/dist/esm/package-checks/json-schema-validation/default-check.mjs

@@ -1,25 +1,23 @@
 import { defineCheck } from "../../check/check.mjs";
+import { resolvePackageCheckAuthoringInput } from "../check-authoring.mjs";
 import { JSON_SCHEMA_VALIDATION_CHECK_DEFINITION, executeJsonSchemaValidation } from "./json-schema-validation.mjs";
 import { parseJsonSchemaValidationData } from "./final-data.mjs";
 import { resolveJsonSchemaValidationOptions } from "./options-resolution.mjs";
 import { validJsonSchemaValidationOptions } from "./options-validation.mjs";
-/**
- * 使用可省略的 file、identity、reference、schema 与 binding policy 构造 Check。
- *
- * @param options - 省略顶层字段和 file fields 使用 package defaults；显式数组是完整替换值。
- * @returns 固定 `json-schema-validation` identity、完整冻结 options、parser 与执行逻辑。
- * @throws {TypeError} input 不符合 closed authoring policy、identity 或 binding 不变量时抛出。
- */
 export function jsonSchemaValidation(options = {}) {
-    const resolvedOptions = resolveJsonSchemaValidationOptions(options);
+    const input = resolvePackageCheckAuthoringInput(options, ["files", "maximumBytes", "schemaIdentity", "referenceResolution", "schemas", "bindings"], JSON_SCHEMA_VALIDATION_CHECK_DEFINITION);
+    if (input === undefined) {
+        throw new TypeError("jsonSchemaValidation options must match the documented closed policy");
+    }
+    const resolvedOptions = resolveJsonSchemaValidationOptions(input.domainOptions);
     if (resolvedOptions === undefined) {
         throw new TypeError("jsonSchemaValidation options must match the documented closed policy");
     }
     return defineCheck({
-        ...JSON_SCHEMA_VALIDATION_CHECK_DEFINITION,
-        execution: executeJsonSchemaValidation,
+        ...input.definition,
+        execute: executeJsonSchemaValidation,
         parseData: parseJsonSchemaValidationData,
-        preflight: (preparedOptions) => validJsonSchemaValidationOptions(preparedOptions)
+        prepare: (preparedOptions) => validJsonSchemaValidationOptions(preparedOptions)
             ? { status: "success", preparedOptions }
             : {
                 status: "failure",

package/dist/esm/package-checks/json-schema-validation/default-check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,uCAAuC,EACvC,2BAA2B,EAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAKhE,OAAO,EAAE,kCAAkC,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAO,GAAgC,EAAE;IAMzC,MAAM,eAAe,GAAG,kCAAkC,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,uCAAuC;QAC1C,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,6BAA6B;QACxC,SAAS,EAAE,CAAC,eAAe,EAAE,EAAE,CAC7B,gCAAgC,CAAC,eAAe,CAAC;YAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,2IAA2I;qBAC9I;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport {\n  JSON_SCHEMA_VALIDATION_CHECK_DEFINITION,\n  executeJsonSchemaValidation\n} from \"./json-schema-validation.ts\";\nimport { parseJsonSchemaValidationData } from \"./final-data.ts\";\nimport type {\n  JsonSchemaValidationOptions,\n  ResolvedJsonSchemaValidationOptions\n} from \"./options.ts\";\nimport { resolveJsonSchemaValidationOptions } from \"./options-resolution.ts\";\nimport { validJsonSchemaValidationOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的 file、identity、reference、schema 与 binding policy 构造 Check。\n *\n * @param options - 省略顶层字段和 file fields 使用 package defaults；显式数组是完整替换值。\n * @returns 固定 `json-schema-validation` identity、完整冻结 options、parser 与执行逻辑。\n * @throws {TypeError} input 不符合 closed authoring policy、identity 或 binding 不变量时抛出。\n */\nexport function jsonSchemaValidation(\n  options: JsonSchemaValidationOptions = {}\n): TypedCheckWithOptions<\n  \"json-schema-validation\",\n  ResolvedJsonSchemaValidationOptions,\n  typeof parseJsonSchemaValidationData\n> {\n  const resolvedOptions = resolveJsonSchemaValidationOptions(options);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\"jsonSchemaValidation options must match the documented closed policy\");\n  }\n  return defineCheck({\n    ...JSON_SCHEMA_VALIDATION_CHECK_DEFINITION,\n    execution: executeJsonSchemaValidation,\n    parseData: parseJsonSchemaValidationData,\n    preflight: (preparedOptions) =>\n      validJsonSchemaValidationOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"jsonSchemaValidation options are invalid; recreate the Check with jsonSchemaValidation(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}
+{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,iCAAiC,EAElC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uCAAuC,EACvC,2BAA2B,EAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAKhE,OAAO,EAAE,kCAAkC,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AA8B3E,MAAM,UAAU,oBAAoB,CAClC,OAAO,GAAgC,EAAE;IAMzC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,OAAO,EACP,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,CAAC,EACzF,uCAAuC,CACxC,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,eAAe,GAAG,kCAAkC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,KAAK,CAAC,UAAU;QACnB,OAAO,EAAE,2BAA2B;QACpC,SAAS,EAAE,6BAA6B;QACxC,OAAO,EAAE,CAAC,eAAe,EAAE,EAAE,CAC3B,gCAAgC,CAAC,eAAe,CAAC;YAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,2IAA2I;qBAC9I;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport {\n  resolvePackageCheckAuthoringInput,\n  type PackageCheckIdentityInput\n} from \"../check-authoring.ts\";\nimport {\n  JSON_SCHEMA_VALIDATION_CHECK_DEFINITION,\n  executeJsonSchemaValidation\n} from \"./json-schema-validation.ts\";\nimport { parseJsonSchemaValidationData } from \"./final-data.ts\";\nimport type {\n  JsonSchemaValidationOptions,\n  ResolvedJsonSchemaValidationOptions\n} from \"./options.ts\";\nimport { resolveJsonSchemaValidationOptions } from \"./options-resolution.ts\";\nimport { validJsonSchemaValidationOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的 file、identity、reference、schema 与 binding policy 构造 Check。\n *\n * @param options - 省略顶层字段和 file fields 使用 package defaults；显式数组是完整替换值。\n * @returns 固定 `json-schema-validation` identity、完整冻结 options、parser 与执行逻辑。\n * @throws {TypeError} input 不符合 closed authoring policy、identity 或 binding 不变量时抛出。\n */\nexport function jsonSchemaValidation(\n  options?: JsonSchemaValidationOptions<\"json-schema-validation\">\n): TypedCheckWithOptions<\n  \"json-schema-validation\",\n  ResolvedJsonSchemaValidationOptions,\n  typeof parseJsonSchemaValidationData\n>;\nexport function jsonSchemaValidation<const Id extends string>(\n  options: JsonSchemaValidationOptions<Id> & PackageCheckIdentityInput<Id>\n): TypedCheckWithOptions<\n  Id,\n  ResolvedJsonSchemaValidationOptions,\n  typeof parseJsonSchemaValidationData\n>;\nexport function jsonSchemaValidation(\n  options: JsonSchemaValidationOptions\n): TypedCheckWithOptions<\n  string,\n  ResolvedJsonSchemaValidationOptions,\n  typeof parseJsonSchemaValidationData\n>;\nexport function jsonSchemaValidation(\n  options: JsonSchemaValidationOptions = {}\n): TypedCheckWithOptions<\n  string,\n  ResolvedJsonSchemaValidationOptions,\n  typeof parseJsonSchemaValidationData\n> {\n  const input = resolvePackageCheckAuthoringInput(\n    options,\n    [\"files\", \"maximumBytes\", \"schemaIdentity\", \"referenceResolution\", \"schemas\", \"bindings\"],\n    JSON_SCHEMA_VALIDATION_CHECK_DEFINITION\n  );\n  if (input === undefined) {\n    throw new TypeError(\"jsonSchemaValidation options must match the documented closed policy\");\n  }\n  const resolvedOptions = resolveJsonSchemaValidationOptions(input.domainOptions);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\"jsonSchemaValidation options must match the documented closed policy\");\n  }\n  return defineCheck({\n    ...input.definition,\n    execute: executeJsonSchemaValidation,\n    parseData: parseJsonSchemaValidationData,\n    prepare: (preparedOptions) =>\n      validJsonSchemaValidationOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"jsonSchemaValidation options are invalid; recreate the Check with jsonSchemaValidation(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}

package/dist/esm/package-checks/json-schema-validation/options.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/options.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions\n} from \"../project-files/configuration.ts\";\n\n/** 已注册 schema 的 root `$id` 与配置 identity 之间的全 Check 统一规则。 */\nexport type JsonSchemaIdentityMode =\n  /** root `$id` 必须等于 `schemas[].id`，该配置 ID 也是 engine identity。 */\n  | \"require-match\"\n  /** 配置 ID 是 engine identity；object schema 的 invocation-local compile copy 使用该 `$id`。 */\n  | \"configuration-authoritative\"\n  /** 安全的 root `$id` 是 engine identity；配置 ID 仍是 binding 与公开事实的标签。 */\n  | \"document-authoritative\";\n\n/** 整个 Check 共用、不能按单个 schema 混用的 root schema identity policy。 */\nexport interface JsonSchemaIdentity {\n  /** root `$id` 与配置 `schemas[].id` 的关系。 */\n  readonly mode: JsonSchemaIdentityMode;\n}\n\n/** allowlisted 引用解析可读取的单一 Schema 来源及其固定边界。 */\nexport type JsonSchemaReferenceSource =\n  /** Package 固定的 JSON Schema catalog；它不授权网络请求。 */\n  | Readonly<{ readonly kind: \"bundled\"; readonly catalog: \"json-schema-2020-12\" }>\n  | Readonly<{\n      /** 只允许本 source 明确限定的 HTTPS reference scope。 */\n      readonly kind: \"https\";\n      /** 调用方为本 source 选择的安全稳定 identity，不是请求 URL。 */\n      readonly id: string;\n      /** 精确 HTTPS origin；不含 path、credentials、query 或 fragment。 */\n      readonly origin: string;\n      /** 已授权 URL path 的边界；从 `/` 开始，非 root prefix 必须以 `/` 结束。 */\n      readonly pathPrefix: string;\n    }>;\n\n/** 本次 Check 解析 local、bundled 与 allowlisted Schema 引用的封闭策略。 */\nexport type JsonSchemaReferenceResolution =\n  /** 只使用 local schemas 和允许的 bundled catalog，不读取额外 HTTPS schema。 */\n  | Readonly<{ readonly mode: \"offline\" }>\n  | Readonly<{\n      /** 只从 `sources` 的精确 scope 读取额外 schema；没有 implicit registry、headers 或 redirects。 */\n      readonly mode: \"allowlisted\";\n      /** 完整替换的明确 source 集合；每项决定自身可读取的 reference scope。 */\n      readonly sources: readonly JsonSchemaReferenceSource[];\n    }>;\n\n/** 调用方注册的一份 local schema resource；注册表不自动发现 schema。 */\nexport interface RegisteredJsonSchema {\n  /** binding 与公开 facts 使用的安全 schema identity。 */\n  readonly id: string;\n  /** 已由 `files` selection 批准的 normalized project-relative `.json` path。 */\n  readonly path: string;\n}\n\n/** 调用方将一个已批准 local JSON instance 明确绑定到已注册 schema 的关系。 */\nexport interface JsonSchemaInstanceBinding {\n  /** 本次 Check 内唯一、用于公开 facts 的 binding identity。 */\n  readonly id: string;\n  /** 已由 `files` selection 批准的 normalized project-relative `.json` instance path。 */\n  readonly instancePath: string;\n  /** 必须引用 `schemas` 中已注册 schema 的 identity。 */\n  readonly schemaId: string;\n}\n\n/** `jsonSchemaValidation(options?)` 接受的可省略 authoring policy。 */\nexport interface JsonSchemaValidationOptions {\n  /** schema/instance declarations 必须属于的 repository-file selection。 */\n  readonly files?: ProjectFileSelectionOptions;\n  /** 每个 local schema/instance document 允许的最大 raw byte 数；省略时为 1 MiB。 */\n  readonly maximumBytes?: number;\n  /** 整个 Check 共用的 schema root identity 规则；不得按 schema 混用。 */\n  readonly schemaIdentity?: JsonSchemaIdentity;\n  /** 默认离线；额外 schema source 必须显式 allowlist。 */\n  readonly referenceResolution?: JsonSchemaReferenceResolution;\n  /** 显式注册的 schema resources；ID 是 binding 和 public fact 使用的安全 authoring identity。 */\n  readonly schemas?: readonly RegisteredJsonSchema[];\n  /** 明确把一个由本 Check file selection 批准的 instance path 绑定到已声明 schema。 */\n  readonly bindings?: readonly JsonSchemaInstanceBinding[];\n}\n\n/** `json-schema-validation` execution 消费的完整、冻结 options。 */\nexport interface ResolvedJsonSchemaValidationOptions {\n  readonly files: ProjectFileSelection;\n  readonly maximumBytes: number;\n  readonly schemaIdentity: JsonSchemaIdentity;\n  readonly referenceResolution: JsonSchemaReferenceResolution;\n  readonly schemas: readonly RegisteredJsonSchema[];\n  readonly bindings: readonly JsonSchemaInstanceBinding[];\n}\n"]}
+{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/options.ts"],"names":[],"mappings":"","sourcesContent":["import type { PackageCheckAuthoringOptions } from \"../check-authoring.ts\";\nimport type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions\n} from \"../project-files/configuration.ts\";\n\n/** 已注册 schema 的 root `$id` 与配置 identity 之间的全 Check 统一规则。 */\nexport type JsonSchemaIdentityMode =\n  /** root `$id` 必须等于 `schemas[].id`，该配置 ID 也是 engine identity。 */\n  | \"require-match\"\n  /** 配置 ID 是 engine identity；object schema 的 invocation-local compile copy 使用该 `$id`。 */\n  | \"configuration-authoritative\"\n  /** 安全的 root `$id` 是 engine identity；配置 ID 仍是 binding 与公开事实的标签。 */\n  | \"document-authoritative\";\n\n/** 整个 Check 共用、不能按单个 schema 混用的 root schema identity policy。 */\nexport interface JsonSchemaIdentity {\n  /** root `$id` 与配置 `schemas[].id` 的关系。 */\n  readonly mode: JsonSchemaIdentityMode;\n}\n\n/** allowlisted 引用解析可读取的单一 Schema 来源及其固定边界。 */\nexport type JsonSchemaReferenceSource =\n  /** Package 固定的 JSON Schema catalog；它不授权网络请求。 */\n  | Readonly<{ readonly kind: \"bundled\"; readonly catalog: \"json-schema-2020-12\" }>\n  | Readonly<{\n      /** 只允许本 source 明确限定的 HTTPS reference scope。 */\n      readonly kind: \"https\";\n      /** 调用方为本 source 选择的安全稳定 identity，不是请求 URL。 */\n      readonly id: string;\n      /** 精确 HTTPS origin；不含 path、credentials、query 或 fragment。 */\n      readonly origin: string;\n      /** 已授权 URL path 的边界；从 `/` 开始，非 root prefix 必须以 `/` 结束。 */\n      readonly pathPrefix: string;\n    }>;\n\n/** 本次 Check 解析 local、bundled 与 allowlisted Schema 引用的封闭策略。 */\nexport type JsonSchemaReferenceResolution =\n  /** 只使用 local schemas 和允许的 bundled catalog，不读取额外 HTTPS schema。 */\n  | Readonly<{ readonly mode: \"offline\" }>\n  | Readonly<{\n      /** 只从 `sources` 的精确 scope 读取额外 schema；没有 implicit registry、headers 或 redirects。 */\n      readonly mode: \"allowlisted\";\n      /** 完整替换的明确 source 集合；每项决定自身可读取的 reference scope。 */\n      readonly sources: readonly JsonSchemaReferenceSource[];\n    }>;\n\n/** 调用方注册的一份 local schema resource；注册表不自动发现 schema。 */\nexport interface RegisteredJsonSchema {\n  /** binding 与公开 facts 使用的安全 schema identity。 */\n  readonly id: string;\n  /** 已由 `files` selection 批准的 normalized project-relative `.json` path。 */\n  readonly path: string;\n}\n\n/** 调用方将一个已批准 local JSON instance 明确绑定到已注册 schema 的关系。 */\nexport interface JsonSchemaInstanceBinding {\n  /** 本次 Check 内唯一、用于公开 facts 的 binding identity。 */\n  readonly id: string;\n  /** 已由 `files` selection 批准的 normalized project-relative `.json` instance path。 */\n  readonly instancePath: string;\n  /** 必须引用 `schemas` 中已注册 schema 的 identity。 */\n  readonly schemaId: string;\n}\n\n/** `jsonSchemaValidation(options?)` 接受的可省略 authoring policy。 */\nexport interface JsonSchemaValidationOptions<\n  Id extends string = string\n> extends PackageCheckAuthoringOptions<Id> {\n  /** schema/instance declarations 必须属于的 repository-file selection。 */\n  readonly files?: ProjectFileSelectionOptions;\n  /** 每个 local schema/instance document 允许的最大 raw byte 数；省略时为 1 MiB。 */\n  readonly maximumBytes?: number;\n  /** 整个 Check 共用的 schema root identity 规则；不得按 schema 混用。 */\n  readonly schemaIdentity?: JsonSchemaIdentity;\n  /** 默认离线；额外 schema source 必须显式 allowlist。 */\n  readonly referenceResolution?: JsonSchemaReferenceResolution;\n  /** 显式注册的 schema resources；ID 是 binding 和 public fact 使用的安全 authoring identity。 */\n  readonly schemas?: readonly RegisteredJsonSchema[];\n  /** 明确把一个由本 Check file selection 批准的 instance path 绑定到已声明 schema。 */\n  readonly bindings?: readonly JsonSchemaInstanceBinding[];\n}\n\n/** `json-schema-validation` execution 消费的完整、冻结 options。 */\nexport interface ResolvedJsonSchemaValidationOptions {\n  readonly files: ProjectFileSelection;\n  readonly maximumBytes: number;\n  readonly schemaIdentity: JsonSchemaIdentity;\n  readonly referenceResolution: JsonSchemaReferenceResolution;\n  readonly schemas: readonly RegisteredJsonSchema[];\n  readonly bindings: readonly JsonSchemaInstanceBinding[];\n}\n"]}

package/dist/esm/package-checks/json-schema-validation/reference-resolver.mjs

@@ -43,9 +43,13 @@ export class ControlledReferenceResolver {
         if (this.#resolverInput.signal.aborted)
             throw new ReferenceTransportFailure();
         const controller = new AbortController();
-        const abortForCaller = () => controller.abort();
+        const abortForCaller = () => {
+            controller.abort();
+        };
         this.#resolverInput.signal.addEventListener("abort", abortForCaller, { once: true });
-        const timeout = setTimeout(() => controller.abort(), REMOTE_TIMEOUT_MS);
+        const timeout = setTimeout(() => {
+            controller.abort();
+        }, REMOTE_TIMEOUT_MS);
         try {
             return await this.loadWithController(referenceUri, controller);
         }

package/dist/esm/package-checks/json-schema-validation/reference-resolver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"reference-resolver.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/reference-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAOrF,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAC5C,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,OAAO,2BAA2B;IAC7B,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,oBAAoB,CAGxB;IACI,cAAc,CAA0B;IAEjD,YAAY,KAA8B;QACxC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,oBAAoB;YACvB,KAAK,CAAC,mBAAmB,CAAC,IAAI,KAAK,aAAa;gBAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,KAAK,OAAO;oBACrB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC3E,CAAC,CAAC,EAAE,CACP,CACF;gBACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,YAAoB;QACvB,IAAI,sBAA8B,CAAC;QACnC,IAAI,CAAC;YACH,sBAAsB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,YAAoB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAClC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EACrC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CACtC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC;YACxC,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,0BAA0B;gBAC3C,KAAK,YAAY,yBAAyB,EAC1C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,YAAoB,EACpB,UAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5E,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,QAAQ,EACR,yBAAyB,EACzB,IAAI,CAAC,cAAc,CAAC,MAAM,CAC3B,CAAC;QACF,OAAO,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAEO,kBAAkB,CAAC,YAAoB;QAC7C,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAC5B,CAAC,MAAM,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,MAAmB;IAC1E,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClF,OAAO,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE;QACpC,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,QAAQ;QAClB,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAkB;IAC/C,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO;IACxB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClE,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA+B,EAC/B,YAAoB;IAEpB,IAAI,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAAsB;IAErC,YAAY,MAA2B;QACrC,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG","sourcesContent":["import type { AnySchemaObject } from \"ajv\";\n\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\nimport type { SchemaCompileReason } from \"./schema-engine.ts\";\nimport { inspectSchemaPolicy, isJsonObject } from \"./schema-policy.ts\";\nimport { inspectStrictJsonBytes } from \"../json-document/strict-document.ts\";\nimport { normalizeRemoteReference, readBoundedResponse } from \"./remote-response.ts\";\n\ninterface ControlledResolverInput {\n  readonly referenceResolution: ResolvedJsonSchemaValidationOptions[\"referenceResolution\"];\n  readonly signal: AbortSignal;\n}\n\nconst MAX_REMOTE_RESPONSE_BYTES = 1_048_576;\nconst REMOTE_TIMEOUT_MS = 5_000;\n\nexport class ControlledReferenceResolver {\n  readonly #cache = new Map<string, Promise<AnySchemaObject>>();\n  #loadQueue: Promise<void> = Promise.resolve();\n  readonly #allowedHttpsSources: readonly Readonly<{\n    readonly origin: string;\n    readonly pathPrefix: string;\n  }>[];\n  readonly #resolverInput: ControlledResolverInput;\n\n  constructor(input: ControlledResolverInput) {\n    this.#resolverInput = input;\n    this.#allowedHttpsSources =\n      input.referenceResolution.mode === \"allowlisted\"\n        ? Object.freeze(\n            input.referenceResolution.sources.flatMap((source) =>\n              source.kind === \"https\"\n                ? [Object.freeze({ origin: source.origin, pathPrefix: source.pathPrefix })]\n                : []\n            )\n          )\n        : Object.freeze([]);\n  }\n\n  load(referenceUri: string): Promise<AnySchemaObject> {\n    let normalizedReferenceUri: string;\n    try {\n      normalizedReferenceUri = normalizeRemoteReference(referenceUri);\n    } catch {\n      return Promise.reject(new ReferenceResolutionFailure(\"unapproved-reference\"));\n    }\n    const cached = this.#cache.get(normalizedReferenceUri);\n    if (cached !== undefined) return cached;\n    const loading = this.queueLoad(normalizedReferenceUri);\n    this.#cache.set(normalizedReferenceUri, loading);\n    return loading;\n  }\n\n  private queueLoad(referenceUri: string): Promise<AnySchemaObject> {\n    const loading = this.#loadQueue.then(\n      () => this.loadUncached(referenceUri),\n      () => this.loadUncached(referenceUri)\n    );\n    this.#loadQueue = loading.then(\n      () => undefined,\n      () => undefined\n    );\n    return loading;\n  }\n\n  private async loadUncached(referenceUri: string): Promise<AnySchemaObject> {\n    if (!this.isAllowedReference(referenceUri))\n      throw new ReferenceResolutionFailure(\"unapproved-reference\");\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const controller = new AbortController();\n    const abortForCaller = (): void => controller.abort();\n    this.#resolverInput.signal.addEventListener(\"abort\", abortForCaller, { once: true });\n    const timeout = setTimeout(() => controller.abort(), REMOTE_TIMEOUT_MS);\n    try {\n      return await this.loadWithController(referenceUri, controller);\n    } catch (error) {\n      if (\n        error instanceof ReferenceResolutionFailure ||\n        error instanceof ReferenceTransportFailure\n      ) {\n        throw error;\n      }\n      throw new ReferenceTransportFailure();\n    } finally {\n      clearTimeout(timeout);\n      this.#resolverInput.signal.removeEventListener(\"abort\", abortForCaller);\n    }\n  }\n\n  private async loadWithController(\n    referenceUri: string,\n    controller: AbortController\n  ): Promise<AnySchemaObject> {\n    const response = await fetchSchemaResponse(referenceUri, controller.signal);\n    assertAllowedResponse(response);\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const bytes = await readBoundedResponse(\n      response,\n      MAX_REMOTE_RESPONSE_BYTES,\n      this.#resolverInput.signal\n    );\n    return schemaFromRemoteBytes(bytes, referenceUri);\n  }\n\n  private isAllowedReference(referenceUri: string): boolean {\n    let url: URL;\n    try {\n      url = new URL(referenceUri);\n    } catch {\n      return false;\n    }\n    return this.#allowedHttpsSources.some(\n      (source) =>\n        url.origin === source.origin &&\n        (source.pathPrefix === \"/\" || url.pathname.startsWith(source.pathPrefix))\n    );\n  }\n}\n\nasync function fetchSchemaResponse(referenceUri: string, signal: AbortSignal): Promise<Response> {\n  if (typeof globalThis.fetch !== \"function\") throw new ReferenceTransportFailure();\n  return globalThis.fetch(referenceUri, {\n    credentials: \"omit\",\n    method: \"GET\",\n    redirect: \"manual\",\n    signal\n  });\n}\n\nfunction assertAllowedResponse(response: Response): void {\n  if (response.redirected || (response.status >= 300 && response.status < 400)) {\n    throw new ReferenceResolutionFailure(\"unapproved-reference\");\n  }\n  if (response.ok) return;\n  if (response.status >= 500) throw new ReferenceTransportFailure();\n  throw new ReferenceResolutionFailure(\"unapproved-reference\");\n}\n\nfunction schemaFromRemoteBytes(\n  bytes: Uint8Array | \"too-large\",\n  referenceUri: string\n): AnySchemaObject {\n  if (bytes === \"too-large\") throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  const document = inspectStrictJsonBytes(bytes);\n  if (document.kind !== \"valid\" || !isJsonObject(document.jsonValue)) {\n    throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  }\n  if (document.jsonValue.$id !== referenceUri) {\n    throw new ReferenceResolutionFailure(\"remote-schema-id-mismatch\");\n  }\n  const referenceReason = inspectSchemaPolicy(document.jsonValue);\n  if (referenceReason !== undefined) throw new ReferenceResolutionFailure(referenceReason);\n  return document.jsonValue;\n}\n\nexport class ReferenceResolutionFailure extends Error {\n  readonly reason: SchemaCompileReason;\n\n  constructor(reason: SchemaCompileReason) {\n    super(reason);\n    this.reason = reason;\n  }\n}\n\nexport class ReferenceTransportFailure extends Error {}\n"]}
+{"version":3,"file":"reference-resolver.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/reference-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAOrF,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAC5C,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,OAAO,2BAA2B;IAC7B,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,oBAAoB,CAGxB;IACI,cAAc,CAA0B;IAEjD,YAAY,KAA8B;QACxC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,oBAAoB;YACvB,KAAK,CAAC,mBAAmB,CAAC,IAAI,KAAK,aAAa;gBAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,KAAK,OAAO;oBACrB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC3E,CAAC,CAAC,EAAE,CACP,CACF;gBACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,YAAoB;QACvB,IAAI,sBAA8B,CAAC;QACnC,IAAI,CAAC;YACH,sBAAsB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,YAAoB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAClC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EACrC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CACtC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC;YACxC,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,0BAA0B;gBAC3C,KAAK,YAAY,yBAAyB,EAC1C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,YAAoB,EACpB,UAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5E,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,QAAQ,EACR,yBAAyB,EACzB,IAAI,CAAC,cAAc,CAAC,MAAM,CAC3B,CAAC;QACF,OAAO,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAEO,kBAAkB,CAAC,YAAoB;QAC7C,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAC5B,CAAC,MAAM,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,MAAmB;IAC1E,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClF,OAAO,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE;QACpC,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,QAAQ;QAClB,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAkB;IAC/C,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO;IACxB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClE,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA+B,EAC/B,YAAoB;IAEpB,IAAI,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAAsB;IAErC,YAAY,MAA2B;QACrC,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG","sourcesContent":["import type { AnySchemaObject } from \"ajv\";\n\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\nimport type { SchemaCompileReason } from \"./schema-engine.ts\";\nimport { inspectSchemaPolicy, isJsonObject } from \"./schema-policy.ts\";\nimport { inspectStrictJsonBytes } from \"../json-document/strict-document.ts\";\nimport { normalizeRemoteReference, readBoundedResponse } from \"./remote-response.ts\";\n\ninterface ControlledResolverInput {\n  readonly referenceResolution: ResolvedJsonSchemaValidationOptions[\"referenceResolution\"];\n  readonly signal: AbortSignal;\n}\n\nconst MAX_REMOTE_RESPONSE_BYTES = 1_048_576;\nconst REMOTE_TIMEOUT_MS = 5_000;\n\nexport class ControlledReferenceResolver {\n  readonly #cache = new Map<string, Promise<AnySchemaObject>>();\n  #loadQueue: Promise<void> = Promise.resolve();\n  readonly #allowedHttpsSources: readonly Readonly<{\n    readonly origin: string;\n    readonly pathPrefix: string;\n  }>[];\n  readonly #resolverInput: ControlledResolverInput;\n\n  constructor(input: ControlledResolverInput) {\n    this.#resolverInput = input;\n    this.#allowedHttpsSources =\n      input.referenceResolution.mode === \"allowlisted\"\n        ? Object.freeze(\n            input.referenceResolution.sources.flatMap((source) =>\n              source.kind === \"https\"\n                ? [Object.freeze({ origin: source.origin, pathPrefix: source.pathPrefix })]\n                : []\n            )\n          )\n        : Object.freeze([]);\n  }\n\n  load(referenceUri: string): Promise<AnySchemaObject> {\n    let normalizedReferenceUri: string;\n    try {\n      normalizedReferenceUri = normalizeRemoteReference(referenceUri);\n    } catch {\n      return Promise.reject(new ReferenceResolutionFailure(\"unapproved-reference\"));\n    }\n    const cached = this.#cache.get(normalizedReferenceUri);\n    if (cached !== undefined) return cached;\n    const loading = this.queueLoad(normalizedReferenceUri);\n    this.#cache.set(normalizedReferenceUri, loading);\n    return loading;\n  }\n\n  private queueLoad(referenceUri: string): Promise<AnySchemaObject> {\n    const loading = this.#loadQueue.then(\n      () => this.loadUncached(referenceUri),\n      () => this.loadUncached(referenceUri)\n    );\n    this.#loadQueue = loading.then(\n      () => undefined,\n      () => undefined\n    );\n    return loading;\n  }\n\n  private async loadUncached(referenceUri: string): Promise<AnySchemaObject> {\n    if (!this.isAllowedReference(referenceUri))\n      throw new ReferenceResolutionFailure(\"unapproved-reference\");\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const controller = new AbortController();\n    const abortForCaller = (): void => {\n      controller.abort();\n    };\n    this.#resolverInput.signal.addEventListener(\"abort\", abortForCaller, { once: true });\n    const timeout = setTimeout(() => {\n      controller.abort();\n    }, REMOTE_TIMEOUT_MS);\n    try {\n      return await this.loadWithController(referenceUri, controller);\n    } catch (error) {\n      if (\n        error instanceof ReferenceResolutionFailure ||\n        error instanceof ReferenceTransportFailure\n      ) {\n        throw error;\n      }\n      throw new ReferenceTransportFailure();\n    } finally {\n      clearTimeout(timeout);\n      this.#resolverInput.signal.removeEventListener(\"abort\", abortForCaller);\n    }\n  }\n\n  private async loadWithController(\n    referenceUri: string,\n    controller: AbortController\n  ): Promise<AnySchemaObject> {\n    const response = await fetchSchemaResponse(referenceUri, controller.signal);\n    assertAllowedResponse(response);\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const bytes = await readBoundedResponse(\n      response,\n      MAX_REMOTE_RESPONSE_BYTES,\n      this.#resolverInput.signal\n    );\n    return schemaFromRemoteBytes(bytes, referenceUri);\n  }\n\n  private isAllowedReference(referenceUri: string): boolean {\n    let url: URL;\n    try {\n      url = new URL(referenceUri);\n    } catch {\n      return false;\n    }\n    return this.#allowedHttpsSources.some(\n      (source) =>\n        url.origin === source.origin &&\n        (source.pathPrefix === \"/\" || url.pathname.startsWith(source.pathPrefix))\n    );\n  }\n}\n\nasync function fetchSchemaResponse(referenceUri: string, signal: AbortSignal): Promise<Response> {\n  if (typeof globalThis.fetch !== \"function\") throw new ReferenceTransportFailure();\n  return globalThis.fetch(referenceUri, {\n    credentials: \"omit\",\n    method: \"GET\",\n    redirect: \"manual\",\n    signal\n  });\n}\n\nfunction assertAllowedResponse(response: Response): void {\n  if (response.redirected || (response.status >= 300 && response.status < 400)) {\n    throw new ReferenceResolutionFailure(\"unapproved-reference\");\n  }\n  if (response.ok) return;\n  if (response.status >= 500) throw new ReferenceTransportFailure();\n  throw new ReferenceResolutionFailure(\"unapproved-reference\");\n}\n\nfunction schemaFromRemoteBytes(\n  bytes: Uint8Array | \"too-large\",\n  referenceUri: string\n): AnySchemaObject {\n  if (bytes === \"too-large\") throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  const document = inspectStrictJsonBytes(bytes);\n  if (document.kind !== \"valid\" || !isJsonObject(document.jsonValue)) {\n    throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  }\n  if (document.jsonValue.$id !== referenceUri) {\n    throw new ReferenceResolutionFailure(\"remote-schema-id-mismatch\");\n  }\n  const referenceReason = inspectSchemaPolicy(document.jsonValue);\n  if (referenceReason !== undefined) throw new ReferenceResolutionFailure(referenceReason);\n  return document.jsonValue;\n}\n\nexport class ReferenceResolutionFailure extends Error {\n  readonly reason: SchemaCompileReason;\n\n  constructor(reason: SchemaCompileReason) {\n    super(reason);\n    this.reason = reason;\n  }\n}\n\nexport class ReferenceTransportFailure extends Error {}\n"]}

package/dist/esm/package-checks/json-schema-validation/schema-policy.mjs

@@ -90,8 +90,11 @@ function inspectDirectSchemaPolicy(schemaObject) {
         return "invalid-schema";
     if (hasUnsupportedReferenceKeyword(schemaObject))
         return "unsupported-reference";
-    if (Object.hasOwn(schemaObject, "$id") && !permittedNestedIdentifier(schemaObject.$id)) {
-        return "unsupported-reference";
+    if (Object.hasOwn(schemaObject, "$id")) {
+        const identifier = schemaObject.$id;
+        if (identifier === undefined || !permittedNestedIdentifier(identifier)) {
+            return "unsupported-reference";
+        }
     }
     return hasInvalidReferenceValue(schemaObject) ? "unsupported-reference" : undefined;
 }
@@ -99,7 +102,12 @@ function hasUnsupportedReferenceKeyword(schemaObject) {
     return Object.hasOwn(schemaObject, "$dynamicRef") || Object.hasOwn(schemaObject, "$recursiveRef");
 }
 function hasInvalidReferenceValue(schemaObject) {
-    return ["$ref", "$schema"].some((key) => Object.hasOwn(schemaObject, key) && !permittedReference(schemaObject[key]));
+    return ["$ref", "$schema"].some((key) => {
+        if (!Object.hasOwn(schemaObject, key))
+            return false;
+        const reference = schemaObject[key];
+        return reference === undefined || !permittedReference(reference);
+    });
 }
 function inspectNestedSchemaPolicies(schemaObject) {
     for (const [keyword, keywordValue] of Object.entries(schemaObject)) {

package/dist/esm/package-checks/json-schema-validation/schema-policy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema-policy.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/schema-policy.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,aAAa,CAC3B,YAA0B,EAC1B,IAAmE;IAEnE,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,yBAAyB,CAAC,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACxD,MAAM,eAAe,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,YAAY,CAAC,EAAE;YAC5B,QAAQ,EAAE,YAAY,CAAC,EAAE;YACzB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC1E,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IAC/D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpE,IAAI,IAAI,KAAK,eAAe,IAAI,UAAU,KAAK,YAAY,CAAC,EAAE;QAAE,OAAO,oBAAoB,CAAC;IAC5F,MAAM,eAAe,GAAG,mBAAmB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,YAAY,CAAC,EAAE;QAC5B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,YAAY,CAAC,aAAa;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,eAA4C,EAC5C,QAA0C;IAE1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,cAAc,IAAI,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC9C,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,aAA8B,EAC9B,kBAA0B;IAE1B,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IACvD,MAAM,IAAI,GAAoC,EAAE,CAAC;IACjD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;YAC/B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM;YAClD,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;YACjC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAA4B;IAC9D,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAAuD;IAEvD,MAAM,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,OAAO,2BAA2B,CAAC,YAAY,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,yBAAyB,CAChC,YAAuD;IAEvD,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACnE,IAAI,8BAA8B,CAAC,YAAY,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,8BAA8B,CACrC,YAAuD;IAEvD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAAuD;IAEvD,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,YAAuD;IAEvD,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,YAA6B;IAE7B,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA0B;IAClD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,eAAgC;IAC1D,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,WAA4B;IACtD,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,aAA8B;IAE9B,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,iBAAiB;IACjB,sBAAsB;IACtB,UAAU;IACV,eAAe;IACf,MAAM;IACN,IAAI;IACJ,OAAO;IACP,KAAK;IACL,eAAe;IACf,MAAM;IACN,kBAAkB;IAClB,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,cAA+B;IACzD,IAAI,OAAO,cAAc,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,eAAgC;IACjE,OAAO,CACL,OAAO,eAAe,KAAK,QAAQ;QACnC,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACrB,GAAG,CAAC,IAAI,KAAK,UAAU,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,cAA+B;IAE/B,OAAO,CACL,OAAO,cAAc,KAAK,QAAQ;QAClC,cAAc,KAAK,IAAI;QACvB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,cAA+B;IAE/B,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,aAA8B;IACjD,IAAI,OAAO,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC7D,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,aAAa,CAAC;AACvB,CAAC","sourcesContent":["import type { AnySchema } from \"ajv\";\n\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\nimport type { LoadedSchema, SchemaCompileReason } from \"./schema-engine.ts\";\nimport type { StrictJsonValue } from \"../json-document/strict-document.ts\";\n\nexport interface PreparedSchema {\n  readonly authoringId: string;\n  readonly engineId: string;\n  readonly engineSchema: AnySchema;\n}\n\nexport function prepareSchema(\n  loadedSchema: LoadedSchema,\n  mode: ResolvedJsonSchemaValidationOptions[\"schemaIdentity\"][\"mode\"]\n): PreparedSchema | SchemaCompileReason {\n  if (mode === \"configuration-authoritative\") {\n    const documentValue = withConfigurationIdentity(loadedSchema.documentValue, loadedSchema.id);\n    const engineSchema = toAjvSchema(documentValue);\n    if (engineSchema === undefined) return \"invalid-schema\";\n    const referenceReason = inspectSchemaPolicy(documentValue);\n    if (referenceReason !== undefined) return referenceReason;\n    return Object.freeze({\n      authoringId: loadedSchema.id,\n      engineId: loadedSchema.id,\n      engineSchema\n    });\n  }\n\n  if (!isJsonObject(loadedSchema.documentValue)) return \"missing-schema-id\";\n  const documentId = loadedSchema.documentValue.$id;\n  if (typeof documentId !== \"string\") return \"missing-schema-id\";\n  if (!safeSchemaIdentifier(documentId)) return \"invalid-document-id\";\n  if (mode === \"require-match\" && documentId !== loadedSchema.id) return \"schema-id-mismatch\";\n  const referenceReason = inspectSchemaPolicy(loadedSchema.documentValue);\n  if (referenceReason !== undefined) return referenceReason;\n  return Object.freeze({\n    authoringId: loadedSchema.id,\n    engineId: documentId,\n    engineSchema: loadedSchema.documentValue\n  });\n}\n\nexport function rejectDuplicateEngineIds(\n  preparedSchemas: Map<string, PreparedSchema>,\n  failures: Map<string, SchemaCompileReason>\n): void {\n  const byEngineId = new Map<string, string[]>();\n  for (const preparedSchema of preparedSchemas.values()) {\n    const authoringIds = byEngineId.get(preparedSchema.engineId) ?? [];\n    authoringIds.push(preparedSchema.authoringId);\n    byEngineId.set(preparedSchema.engineId, authoringIds);\n  }\n  for (const authoringIds of byEngineId.values()) {\n    if (authoringIds.length < 2) continue;\n    for (const authoringId of authoringIds) {\n      preparedSchemas.delete(authoringId);\n      failures.set(authoringId, \"duplicate-engine-id\");\n    }\n  }\n}\n\nfunction withConfigurationIdentity(\n  documentValue: StrictJsonValue,\n  configuredSchemaId: string\n): StrictJsonValue {\n  if (!isJsonObject(documentValue)) return documentValue;\n  const copy: Record<string, StrictJsonValue> = {};\n  Object.setPrototypeOf(copy, null);\n  for (const [key, nested] of Object.entries(documentValue)) {\n    Object.defineProperty(copy, key, {\n      configurable: false,\n      enumerable: true,\n      value: key === \"$id\" ? configuredSchemaId : nested,\n      writable: false\n    });\n  }\n  if (!Object.hasOwn(copy, \"$id\")) {\n    Object.defineProperty(copy, \"$id\", {\n      configurable: false,\n      enumerable: true,\n      value: configuredSchemaId,\n      writable: false\n    });\n  }\n  return Object.freeze(copy);\n}\n\n/**\n * Inspects only JSON Schema-bearing locations. Annotation payloads and property names are data, not keywords,\n * so they must not be mistaken for `$ref`, `$dynamicRef`, or an Ajv extension.\n */\nexport function inspectSchemaPolicy(schemaValue: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(schemaValue)) return undefined;\n  return inspectSchemaObject(schemaValue);\n}\n\nfunction inspectSchemaObject(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  const directReason = inspectDirectSchemaPolicy(schemaObject);\n  if (directReason !== undefined) return directReason;\n  return inspectNestedSchemaPolicies(schemaObject);\n}\n\nfunction inspectDirectSchemaPolicy(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  if (Object.hasOwn(schemaObject, \"$async\")) return \"invalid-schema\";\n  if (hasUnsupportedReferenceKeyword(schemaObject)) return \"unsupported-reference\";\n  if (Object.hasOwn(schemaObject, \"$id\") && !permittedNestedIdentifier(schemaObject.$id)) {\n    return \"unsupported-reference\";\n  }\n  return hasInvalidReferenceValue(schemaObject) ? \"unsupported-reference\" : undefined;\n}\n\nfunction hasUnsupportedReferenceKeyword(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): boolean {\n  return Object.hasOwn(schemaObject, \"$dynamicRef\") || Object.hasOwn(schemaObject, \"$recursiveRef\");\n}\n\nfunction hasInvalidReferenceValue(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): boolean {\n  return [\"$ref\", \"$schema\"].some(\n    (key) => Object.hasOwn(schemaObject, key) && !permittedReference(schemaObject[key])\n  );\n}\n\nfunction inspectNestedSchemaPolicies(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  for (const [keyword, keywordValue] of Object.entries(schemaObject)) {\n    const reason = inspectNestedSchemaPolicy(keyword, keywordValue);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectNestedSchemaPolicy(\n  keyword: string,\n  keywordValue: StrictJsonValue\n): SchemaCompileReason | undefined {\n  if (SCHEMA_MAP_KEYWORDS.has(keyword)) return inspectSchemaMap(keywordValue);\n  if (SCHEMA_VALUE_KEYWORDS.has(keyword)) return inspectSchemaValue(keywordValue);\n  if (SCHEMA_ARRAY_KEYWORDS.has(keyword)) return inspectSchemaArray(keywordValue);\n  if (keyword === \"dependencies\") return inspectLegacyDependencies(keywordValue);\n  return undefined;\n}\n\nfunction inspectSchemaMap(schemaMap: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(schemaMap)) return undefined;\n  for (const nestedSchema of Object.values(schemaMap)) {\n    const reason = inspectSchemaValue(nestedSchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectSchemaValue(candidateSchema: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(candidateSchema)) return undefined;\n  return inspectSchemaObject(candidateSchema);\n}\n\nfunction inspectSchemaArray(schemaArray: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isStrictJsonArray(schemaArray)) return undefined;\n  for (const nestedSchema of schemaArray) {\n    const reason = inspectSchemaValue(nestedSchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectLegacyDependencies(\n  dependencyMap: StrictJsonValue\n): SchemaCompileReason | undefined {\n  if (!isJsonObject(dependencyMap)) return undefined;\n  for (const dependencySchema of Object.values(dependencyMap)) {\n    const reason = inspectSchemaValue(dependencySchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nconst SCHEMA_MAP_KEYWORDS: ReadonlySet<string> = new Set([\n  \"$defs\",\n  \"definitions\",\n  \"dependentSchemas\",\n  \"patternProperties\",\n  \"properties\"\n]);\n\nconst SCHEMA_VALUE_KEYWORDS: ReadonlySet<string> = new Set([\n  \"additionalItems\",\n  \"additionalProperties\",\n  \"contains\",\n  \"contentSchema\",\n  \"else\",\n  \"if\",\n  \"items\",\n  \"not\",\n  \"propertyNames\",\n  \"then\",\n  \"unevaluatedItems\",\n  \"unevaluatedProperties\"\n]);\n\nconst SCHEMA_ARRAY_KEYWORDS: ReadonlySet<string> = new Set([\n  \"allOf\",\n  \"anyOf\",\n  \"oneOf\",\n  \"prefixItems\"\n]);\n\nfunction permittedReference(referenceValue: StrictJsonValue): boolean {\n  if (typeof referenceValue !== \"string\") return false;\n  if (referenceValue.startsWith(\"#\")) return true;\n  try {\n    const url = new URL(referenceValue);\n    return (\n      (url.protocol === \"https:\" || url.protocol === \"urn:\") &&\n      url.username.length === 0 &&\n      url.password.length === 0 &&\n      url.search.length === 0\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction permittedNestedIdentifier(identifierValue: StrictJsonValue): boolean {\n  return (\n    typeof identifierValue === \"string\" &&\n    (identifierValue.startsWith(\"#\") || safeSchemaIdentifier(identifierValue))\n  );\n}\n\nfunction safeSchemaIdentifier(identifier: string): boolean {\n  try {\n    const url = new URL(identifier);\n    return (\n      (url.protocol === \"https:\" || url.protocol === \"urn:\") &&\n      url.username.length === 0 &&\n      url.password.length === 0 &&\n      url.search.length === 0 &&\n      url.hash.length === 0 &&\n      url.href === identifier\n    );\n  } catch {\n    return false;\n  }\n}\n\nexport function isJsonObject(\n  candidateValue: StrictJsonValue\n): candidateValue is Readonly<Record<string, StrictJsonValue>> {\n  return (\n    typeof candidateValue === \"object\" &&\n    candidateValue !== null &&\n    !isStrictJsonArray(candidateValue)\n  );\n}\n\nfunction isStrictJsonArray(\n  candidateValue: StrictJsonValue\n): candidateValue is readonly StrictJsonValue[] {\n  return Array.isArray(candidateValue);\n}\n\nfunction toAjvSchema(documentValue: StrictJsonValue): AnySchema | undefined {\n  if (typeof documentValue === \"boolean\") return documentValue;\n  if (!isJsonObject(documentValue)) return undefined;\n  return documentValue;\n}\n"]}
+{"version":3,"file":"schema-policy.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/schema-policy.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,aAAa,CAC3B,YAA0B,EAC1B,IAAmE;IAEnE,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,yBAAyB,CAAC,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACxD,MAAM,eAAe,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,eAAe,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,YAAY,CAAC,EAAE;YAC5B,QAAQ,EAAE,YAAY,CAAC,EAAE;YACzB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAC1E,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IAC/D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpE,IAAI,IAAI,KAAK,eAAe,IAAI,UAAU,KAAK,YAAY,CAAC,EAAE;QAAE,OAAO,oBAAoB,CAAC;IAC5F,MAAM,eAAe,GAAG,mBAAmB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,YAAY,CAAC,EAAE;QAC5B,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,YAAY,CAAC,aAAa;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,eAA4C,EAC5C,QAA0C;IAE1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,cAAc,IAAI,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC9C,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,aAA8B,EAC9B,kBAA0B;IAE1B,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IACvD,MAAM,IAAI,GAAoC,EAAE,CAAC;IACjD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;YAC/B,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM;YAClD,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;YACjC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAA4B;IAC9D,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAAuD;IAEvD,MAAM,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,OAAO,2BAA2B,CAAC,YAAY,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,yBAAyB,CAChC,YAAuD;IAEvD,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACnE,IAAI,8BAA8B,CAAC,YAAY,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC;QACpC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;YACvE,OAAO,uBAAuB,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,8BAA8B,CACrC,YAAuD;IAEvD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAAuD;IAEvD,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,SAAS,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,YAAuD;IAEvD,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,OAAe,EACf,YAA6B;IAE7B,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA0B;IAClD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,eAAgC;IAC1D,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,WAA4B;IACtD,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,aAA8B;IAE9B,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,iBAAiB;IACjB,sBAAsB;IACtB,UAAU;IACV,eAAe;IACf,MAAM;IACN,IAAI;IACJ,OAAO;IACP,KAAK;IACL,eAAe;IACf,MAAM;IACN,kBAAkB;IAClB,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,cAA+B;IACzD,IAAI,OAAO,cAAc,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,eAAgC;IACjE,OAAO,CACL,OAAO,eAAe,KAAK,QAAQ;QACnC,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;YACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACrB,GAAG,CAAC,IAAI,KAAK,UAAU,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,cAA+B;IAE/B,OAAO,CACL,OAAO,cAAc,KAAK,QAAQ;QAClC,cAAc,KAAK,IAAI;QACvB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,cAA+B;IAE/B,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,aAA8B;IACjD,IAAI,OAAO,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC7D,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,aAAa,CAAC;AACvB,CAAC","sourcesContent":["import type { AnySchema } from \"ajv\";\n\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\nimport type { LoadedSchema, SchemaCompileReason } from \"./schema-engine.ts\";\nimport type { StrictJsonValue } from \"../json-document/strict-document.ts\";\n\nexport interface PreparedSchema {\n  readonly authoringId: string;\n  readonly engineId: string;\n  readonly engineSchema: AnySchema;\n}\n\nexport function prepareSchema(\n  loadedSchema: LoadedSchema,\n  mode: ResolvedJsonSchemaValidationOptions[\"schemaIdentity\"][\"mode\"]\n): PreparedSchema | SchemaCompileReason {\n  if (mode === \"configuration-authoritative\") {\n    const documentValue = withConfigurationIdentity(loadedSchema.documentValue, loadedSchema.id);\n    const engineSchema = toAjvSchema(documentValue);\n    if (engineSchema === undefined) return \"invalid-schema\";\n    const referenceReason = inspectSchemaPolicy(documentValue);\n    if (referenceReason !== undefined) return referenceReason;\n    return Object.freeze({\n      authoringId: loadedSchema.id,\n      engineId: loadedSchema.id,\n      engineSchema\n    });\n  }\n\n  if (!isJsonObject(loadedSchema.documentValue)) return \"missing-schema-id\";\n  const documentId = loadedSchema.documentValue.$id;\n  if (typeof documentId !== \"string\") return \"missing-schema-id\";\n  if (!safeSchemaIdentifier(documentId)) return \"invalid-document-id\";\n  if (mode === \"require-match\" && documentId !== loadedSchema.id) return \"schema-id-mismatch\";\n  const referenceReason = inspectSchemaPolicy(loadedSchema.documentValue);\n  if (referenceReason !== undefined) return referenceReason;\n  return Object.freeze({\n    authoringId: loadedSchema.id,\n    engineId: documentId,\n    engineSchema: loadedSchema.documentValue\n  });\n}\n\nexport function rejectDuplicateEngineIds(\n  preparedSchemas: Map<string, PreparedSchema>,\n  failures: Map<string, SchemaCompileReason>\n): void {\n  const byEngineId = new Map<string, string[]>();\n  for (const preparedSchema of preparedSchemas.values()) {\n    const authoringIds = byEngineId.get(preparedSchema.engineId) ?? [];\n    authoringIds.push(preparedSchema.authoringId);\n    byEngineId.set(preparedSchema.engineId, authoringIds);\n  }\n  for (const authoringIds of byEngineId.values()) {\n    if (authoringIds.length < 2) continue;\n    for (const authoringId of authoringIds) {\n      preparedSchemas.delete(authoringId);\n      failures.set(authoringId, \"duplicate-engine-id\");\n    }\n  }\n}\n\nfunction withConfigurationIdentity(\n  documentValue: StrictJsonValue,\n  configuredSchemaId: string\n): StrictJsonValue {\n  if (!isJsonObject(documentValue)) return documentValue;\n  const copy: Record<string, StrictJsonValue> = {};\n  Object.setPrototypeOf(copy, null);\n  for (const [key, nested] of Object.entries(documentValue)) {\n    Object.defineProperty(copy, key, {\n      configurable: false,\n      enumerable: true,\n      value: key === \"$id\" ? configuredSchemaId : nested,\n      writable: false\n    });\n  }\n  if (!Object.hasOwn(copy, \"$id\")) {\n    Object.defineProperty(copy, \"$id\", {\n      configurable: false,\n      enumerable: true,\n      value: configuredSchemaId,\n      writable: false\n    });\n  }\n  return Object.freeze(copy);\n}\n\n/**\n * Inspects only JSON Schema-bearing locations. Annotation payloads and property names are data, not keywords,\n * so they must not be mistaken for `$ref`, `$dynamicRef`, or an Ajv extension.\n */\nexport function inspectSchemaPolicy(schemaValue: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(schemaValue)) return undefined;\n  return inspectSchemaObject(schemaValue);\n}\n\nfunction inspectSchemaObject(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  const directReason = inspectDirectSchemaPolicy(schemaObject);\n  if (directReason !== undefined) return directReason;\n  return inspectNestedSchemaPolicies(schemaObject);\n}\n\nfunction inspectDirectSchemaPolicy(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  if (Object.hasOwn(schemaObject, \"$async\")) return \"invalid-schema\";\n  if (hasUnsupportedReferenceKeyword(schemaObject)) return \"unsupported-reference\";\n  if (Object.hasOwn(schemaObject, \"$id\")) {\n    const identifier = schemaObject.$id;\n    if (identifier === undefined || !permittedNestedIdentifier(identifier)) {\n      return \"unsupported-reference\";\n    }\n  }\n  return hasInvalidReferenceValue(schemaObject) ? \"unsupported-reference\" : undefined;\n}\n\nfunction hasUnsupportedReferenceKeyword(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): boolean {\n  return Object.hasOwn(schemaObject, \"$dynamicRef\") || Object.hasOwn(schemaObject, \"$recursiveRef\");\n}\n\nfunction hasInvalidReferenceValue(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): boolean {\n  return [\"$ref\", \"$schema\"].some((key) => {\n    if (!Object.hasOwn(schemaObject, key)) return false;\n    const reference = schemaObject[key];\n    return reference === undefined || !permittedReference(reference);\n  });\n}\n\nfunction inspectNestedSchemaPolicies(\n  schemaObject: Readonly<Record<string, StrictJsonValue>>\n): SchemaCompileReason | undefined {\n  for (const [keyword, keywordValue] of Object.entries(schemaObject)) {\n    const reason = inspectNestedSchemaPolicy(keyword, keywordValue);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectNestedSchemaPolicy(\n  keyword: string,\n  keywordValue: StrictJsonValue\n): SchemaCompileReason | undefined {\n  if (SCHEMA_MAP_KEYWORDS.has(keyword)) return inspectSchemaMap(keywordValue);\n  if (SCHEMA_VALUE_KEYWORDS.has(keyword)) return inspectSchemaValue(keywordValue);\n  if (SCHEMA_ARRAY_KEYWORDS.has(keyword)) return inspectSchemaArray(keywordValue);\n  if (keyword === \"dependencies\") return inspectLegacyDependencies(keywordValue);\n  return undefined;\n}\n\nfunction inspectSchemaMap(schemaMap: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(schemaMap)) return undefined;\n  for (const nestedSchema of Object.values(schemaMap)) {\n    const reason = inspectSchemaValue(nestedSchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectSchemaValue(candidateSchema: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isJsonObject(candidateSchema)) return undefined;\n  return inspectSchemaObject(candidateSchema);\n}\n\nfunction inspectSchemaArray(schemaArray: StrictJsonValue): SchemaCompileReason | undefined {\n  if (!isStrictJsonArray(schemaArray)) return undefined;\n  for (const nestedSchema of schemaArray) {\n    const reason = inspectSchemaValue(nestedSchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nfunction inspectLegacyDependencies(\n  dependencyMap: StrictJsonValue\n): SchemaCompileReason | undefined {\n  if (!isJsonObject(dependencyMap)) return undefined;\n  for (const dependencySchema of Object.values(dependencyMap)) {\n    const reason = inspectSchemaValue(dependencySchema);\n    if (reason !== undefined) return reason;\n  }\n  return undefined;\n}\n\nconst SCHEMA_MAP_KEYWORDS: ReadonlySet<string> = new Set([\n  \"$defs\",\n  \"definitions\",\n  \"dependentSchemas\",\n  \"patternProperties\",\n  \"properties\"\n]);\n\nconst SCHEMA_VALUE_KEYWORDS: ReadonlySet<string> = new Set([\n  \"additionalItems\",\n  \"additionalProperties\",\n  \"contains\",\n  \"contentSchema\",\n  \"else\",\n  \"if\",\n  \"items\",\n  \"not\",\n  \"propertyNames\",\n  \"then\",\n  \"unevaluatedItems\",\n  \"unevaluatedProperties\"\n]);\n\nconst SCHEMA_ARRAY_KEYWORDS: ReadonlySet<string> = new Set([\n  \"allOf\",\n  \"anyOf\",\n  \"oneOf\",\n  \"prefixItems\"\n]);\n\nfunction permittedReference(referenceValue: StrictJsonValue): boolean {\n  if (typeof referenceValue !== \"string\") return false;\n  if (referenceValue.startsWith(\"#\")) return true;\n  try {\n    const url = new URL(referenceValue);\n    return (\n      (url.protocol === \"https:\" || url.protocol === \"urn:\") &&\n      url.username.length === 0 &&\n      url.password.length === 0 &&\n      url.search.length === 0\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction permittedNestedIdentifier(identifierValue: StrictJsonValue): boolean {\n  return (\n    typeof identifierValue === \"string\" &&\n    (identifierValue.startsWith(\"#\") || safeSchemaIdentifier(identifierValue))\n  );\n}\n\nfunction safeSchemaIdentifier(identifier: string): boolean {\n  try {\n    const url = new URL(identifier);\n    return (\n      (url.protocol === \"https:\" || url.protocol === \"urn:\") &&\n      url.username.length === 0 &&\n      url.password.length === 0 &&\n      url.search.length === 0 &&\n      url.hash.length === 0 &&\n      url.href === identifier\n    );\n  } catch {\n    return false;\n  }\n}\n\nexport function isJsonObject(\n  candidateValue: StrictJsonValue\n): candidateValue is Readonly<Record<string, StrictJsonValue>> {\n  return (\n    typeof candidateValue === \"object\" &&\n    candidateValue !== null &&\n    !isStrictJsonArray(candidateValue)\n  );\n}\n\nfunction isStrictJsonArray(\n  candidateValue: StrictJsonValue\n): candidateValue is readonly StrictJsonValue[] {\n  return Array.isArray(candidateValue);\n}\n\nfunction toAjvSchema(documentValue: StrictJsonValue): AnySchema | undefined {\n  if (typeof documentValue === \"boolean\") return documentValue;\n  if (!isJsonObject(documentValue)) return undefined;\n  return documentValue;\n}\n"]}

package/dist/esm/package-checks/json-validation/default-check.mjs

@@ -1,25 +1,23 @@
 import { defineCheck } from "../../check/check.mjs";
+import { resolvePackageCheckAuthoringInput } from "../check-authoring.mjs";
 import { JSON_VALIDATION_CHECK_DEFINITION, executeJsonValidation } from "./json-validation.mjs";
 import { parseJsonValidationData } from "./final-data.mjs";
 import { resolveJsonValidationOptions } from "./options-resolution.mjs";
 import { validJsonValidationOptions } from "./options-validation.mjs";
-/**
- * 使用可省略的文件范围与 byte limit 构造严格 JSON document Check。
- *
- * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。
- * @returns 固定 `json-validation` identity、完整冻结 options、final-data parser 与执行逻辑。
- * @throws {TypeError} input 含未知字段、非法文件选择或非法 byte limit 时抛出。
- */
 export function jsonValidation(options = {}) {
-    const resolvedOptions = resolveJsonValidationOptions(options);
+    const input = resolvePackageCheckAuthoringInput(options, ["files", "maximumBytes"], JSON_VALIDATION_CHECK_DEFINITION);
+    if (input === undefined) {
+        throw new TypeError("jsonValidation options must match the documented closed policy");
+    }
+    const resolvedOptions = resolveJsonValidationOptions(input.domainOptions);
     if (resolvedOptions === undefined) {
         throw new TypeError("jsonValidation options must match the documented closed policy");
     }
     return defineCheck({
-        ...JSON_VALIDATION_CHECK_DEFINITION,
-        execution: executeJsonValidation,
+        ...input.definition,
+        execute: executeJsonValidation,
         parseData: parseJsonValidationData,
-        preflight: (preparedOptions) => validJsonValidationOptions(preparedOptions)
+        prepare: (preparedOptions) => validJsonValidationOptions(preparedOptions)
             ? { status: "success", preparedOptions }
             : {
                 status: "failure",

package/dist/esm/package-checks/json-validation/default-check.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-validation/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAO,GAA0B,EAAE;IAMnC,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,gCAAgC;QACnC,SAAS,EAAE,qBAAqB;QAChC,SAAS,EAAE,uBAAuB;QAClC,SAAS,EAAE,CAAC,eAAe,EAAE,EAAE,CAC7B,0BAA0B,CAAC,eAAe,CAAC;YACzC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,+HAA+H;qBAClI;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport { JSON_VALIDATION_CHECK_DEFINITION, executeJsonValidation } from \"./json-validation.ts\";\nimport { parseJsonValidationData } from \"./final-data.ts\";\nimport type { JsonValidationOptions, ResolvedJsonValidationOptions } from \"./options.ts\";\nimport { resolveJsonValidationOptions } from \"./options-resolution.ts\";\nimport { validJsonValidationOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的文件范围与 byte limit 构造严格 JSON document Check。\n *\n * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。\n * @returns 固定 `json-validation` identity、完整冻结 options、final-data parser 与执行逻辑。\n * @throws {TypeError} input 含未知字段、非法文件选择或非法 byte limit 时抛出。\n */\nexport function jsonValidation(\n  options: JsonValidationOptions = {}\n): TypedCheckWithOptions<\n  \"json-validation\",\n  ResolvedJsonValidationOptions,\n  typeof parseJsonValidationData\n> {\n  const resolvedOptions = resolveJsonValidationOptions(options);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\"jsonValidation options must match the documented closed policy\");\n  }\n  return defineCheck({\n    ...JSON_VALIDATION_CHECK_DEFINITION,\n    execution: executeJsonValidation,\n    parseData: parseJsonValidationData,\n    preflight: (preparedOptions) =>\n      validJsonValidationOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"jsonValidation options are invalid; recreate the Check with jsonValidation(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}
+{"version":3,"file":"default-check.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-validation/default-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8B,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,iCAAiC,EAElC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAsBrE,MAAM,UAAU,cAAc,CAC5B,OAAO,GAA0B,EAAE;IAEnC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,OAAO,EACP,CAAC,OAAO,EAAE,cAAc,CAAC,EACzB,gCAAgC,CACjC,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,eAAe,GAAG,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,KAAK,CAAC,UAAU;QACnB,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,uBAAuB;QAClC,OAAO,EAAE,CAAC,eAAe,EAAE,EAAE,CAC3B,0BAA0B,CAAC,eAAe,CAAC;YACzC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACnC,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EAAE,OAAO;wBACd,OAAO,EACL,+HAA+H;qBAClI;iBACF;aACF;QACP,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineCheck, type TypedCheckWithOptions } from \"../../check/check.ts\";\nimport {\n  resolvePackageCheckAuthoringInput,\n  type PackageCheckIdentityInput\n} from \"../check-authoring.ts\";\nimport { JSON_VALIDATION_CHECK_DEFINITION, executeJsonValidation } from \"./json-validation.ts\";\nimport { parseJsonValidationData } from \"./final-data.ts\";\nimport type { JsonValidationOptions, ResolvedJsonValidationOptions } from \"./options.ts\";\nimport { resolveJsonValidationOptions } from \"./options-resolution.ts\";\nimport { validJsonValidationOptions } from \"./options-validation.ts\";\n\n/**\n * 使用可省略的文件范围与 byte limit 构造严格 JSON document Check。\n *\n * @param options - 省略字段由 package 补齐；显式 files 数组作为对应字段的完整替换值。\n * @returns 固定 `json-validation` identity、完整冻结 options、final-data parser 与执行逻辑。\n * @throws {TypeError} input 含未知字段、非法文件选择或非法 byte limit 时抛出。\n */\nexport function jsonValidation(\n  options?: JsonValidationOptions<\"json-validation\">\n): TypedCheckWithOptions<\n  \"json-validation\",\n  ResolvedJsonValidationOptions,\n  typeof parseJsonValidationData\n>;\nexport function jsonValidation<const Id extends string>(\n  options: JsonValidationOptions<Id> & PackageCheckIdentityInput<Id>\n): TypedCheckWithOptions<Id, ResolvedJsonValidationOptions, typeof parseJsonValidationData>;\nexport function jsonValidation(\n  options: JsonValidationOptions\n): TypedCheckWithOptions<string, ResolvedJsonValidationOptions, typeof parseJsonValidationData>;\nexport function jsonValidation(\n  options: JsonValidationOptions = {}\n): TypedCheckWithOptions<string, ResolvedJsonValidationOptions, typeof parseJsonValidationData> {\n  const input = resolvePackageCheckAuthoringInput(\n    options,\n    [\"files\", \"maximumBytes\"],\n    JSON_VALIDATION_CHECK_DEFINITION\n  );\n  if (input === undefined) {\n    throw new TypeError(\"jsonValidation options must match the documented closed policy\");\n  }\n  const resolvedOptions = resolveJsonValidationOptions(input.domainOptions);\n  if (resolvedOptions === undefined) {\n    throw new TypeError(\"jsonValidation options must match the documented closed policy\");\n  }\n  return defineCheck({\n    ...input.definition,\n    execute: executeJsonValidation,\n    parseData: parseJsonValidationData,\n    prepare: (preparedOptions) =>\n      validJsonValidationOptions(preparedOptions)\n        ? { status: \"success\", preparedOptions }\n        : {\n            status: \"failure\",\n            action: \"block\",\n            reason: { code: \"invalid-options\" },\n            messages: [\n              {\n                code: \"invalid-options\",\n                level: \"error\",\n                message:\n                  \"jsonValidation options are invalid; recreate the Check with jsonValidation(options) or restore its complete resolved options.\"\n              }\n            ]\n          },\n    options: resolvedOptions\n  });\n}\n"]}

package/dist/esm/package-checks/json-validation/options.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-validation/options.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions\n} from \"../project-files/configuration.ts\";\n\n/** `jsonValidation(options?)` 接受的可省略 authoring policy。 */\nexport interface JsonValidationOptions {\n  /** 参与本 Check 的 repository-file selection；省略字段使用 package defaults。 */\n  readonly files?: ProjectFileSelectionOptions;\n  /** 单个 JSON document 允许的最大 raw byte 数；省略时为 1 MiB。 */\n  readonly maximumBytes?: number;\n}\n\n/** `json-validation` execution 消费的完整、冻结 options。 */\nexport interface ResolvedJsonValidationOptions {\n  readonly files: ProjectFileSelection;\n  readonly maximumBytes: number;\n}\n"]}
+{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-validation/options.ts"],"names":[],"mappings":"","sourcesContent":["import type { PackageCheckAuthoringOptions } from \"../check-authoring.ts\";\nimport type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions\n} from \"../project-files/configuration.ts\";\n\n/** `jsonValidation(options?)` 接受的可省略 authoring policy。 */\nexport interface JsonValidationOptions<\n  Id extends string = string\n> extends PackageCheckAuthoringOptions<Id> {\n  /** 参与本 Check 的 repository-file selection；省略字段使用 package defaults。 */\n  readonly files?: ProjectFileSelectionOptions;\n  /** 单个 JSON document 允许的最大 raw byte 数；省略时为 1 MiB。 */\n  readonly maximumBytes?: number;\n}\n\n/** `json-validation` execution 消费的完整、冻结 options。 */\nexport interface ResolvedJsonValidationOptions {\n  readonly files: ProjectFileSelection;\n  readonly maximumBytes: number;\n}\n"]}

package/dist/esm/package-checks/local-cache-options.mjs

@@ -0,0 +1,28 @@
+import { isAbsolute } from "node:path";
+import { hasExactPlainRecordKeys, snapshotClosedRecord, snapshotExactClosedRecord } from "../data-boundary/closed-values.mjs";
+export function resolveOptionalLocalCacheOptions(value) {
+    if (value === undefined)
+        return Object.freeze({ enabled: false });
+    const cache = snapshotClosedRecord(value);
+    if (cache === undefined)
+        return undefined;
+    if (hasExactPlainRecordKeys(cache, ["enabled"]) && cache.enabled === false)
+        return Object.freeze({ enabled: false });
+    if (hasExactPlainRecordKeys(cache, ["enabled", "directory"]) &&
+        cache.enabled === true &&
+        typeof cache.directory === "string")
+        return Object.freeze({ enabled: true, directory: cache.directory });
+    return undefined;
+}
+export function validLocalCacheOptions(value) {
+    const disabled = snapshotExactClosedRecord(value, ["enabled"]);
+    if (disabled?.enabled === false)
+        return true;
+    const enabled = snapshotExactClosedRecord(value, ["enabled", "directory"]);
+    return (enabled?.enabled === true &&
+        typeof enabled.directory === "string" &&
+        enabled.directory.length > 0 &&
+        !enabled.directory.includes("\0") &&
+        isAbsolute(enabled.directory));
+}
+//# sourceMappingURL=local-cache-options.mjs.map

package/dist/esm/package-checks/local-cache-options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-cache-options.mjs","sourceRoot":"","sources":["../../../src/package-checks/local-cache-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,mCAAmC,CAAC;AAO3C,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAc,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QACxE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAc,EAAE,CAAC,CAAC;IACpD,IACE,uBAAuB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAEnC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3E,OAAO,CACL,OAAO,EAAE,OAAO,KAAK,IAAI;QACzB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QACrC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAC5B,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAC9B,CAAC;AACJ,CAAC","sourcesContent":["import { isAbsolute } from \"node:path\";\n\nimport {\n  hasExactPlainRecordKeys,\n  snapshotClosedRecord,\n  snapshotExactClosedRecord\n} from \"../data-boundary/closed-values.ts\";\n\n/** Shared closed grammar for an explicitly owned, deletable local cache directory. */\nexport type LocalCacheOptions =\n  | Readonly<{ readonly enabled: false }>\n  | Readonly<{ readonly enabled: true; readonly directory: string }>;\n\nexport function resolveOptionalLocalCacheOptions(value: unknown): LocalCacheOptions | undefined {\n  if (value === undefined) return Object.freeze({ enabled: false as const });\n  const cache = snapshotClosedRecord(value);\n  if (cache === undefined) return undefined;\n  if (hasExactPlainRecordKeys(cache, [\"enabled\"]) && cache.enabled === false)\n    return Object.freeze({ enabled: false as const });\n  if (\n    hasExactPlainRecordKeys(cache, [\"enabled\", \"directory\"]) &&\n    cache.enabled === true &&\n    typeof cache.directory === \"string\"\n  )\n    return Object.freeze({ enabled: true as const, directory: cache.directory });\n  return undefined;\n}\n\nexport function validLocalCacheOptions(value: unknown): value is LocalCacheOptions {\n  const disabled = snapshotExactClosedRecord(value, [\"enabled\"]);\n  if (disabled?.enabled === false) return true;\n  const enabled = snapshotExactClosedRecord(value, [\"enabled\", \"directory\"]);\n  return (\n    enabled?.enabled === true &&\n    typeof enabled.directory === \"string\" &&\n    enabled.directory.length > 0 &&\n    !enabled.directory.includes(\"\\0\") &&\n    isAbsolute(enabled.directory)\n  );\n}\n"]}